Re: dns cache poisoning

["Jim Franz" <franz400@xxxxxxxxxxxx>]

V6R1 (i think) fixes the Bind 8 weakness,
but dns cache poisoning is more than that.
Cert still lists IBM as having said nothing in public to address this or 
even if it is an issue. Given that Cisco, MS, Sun and others are all 
labelled as "vulnerable", I worry about all the no comments...
Jim
----- Original Message ----- 
From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, July 10, 2008 1:22 PM
Subject: Re: dns cache poisoning


> We've contracted with IBM to do some benevolent hacking.  They were really
> getting down on us because of that bind level.  iSeries support was saying
> it's a non problem.  We told those two to duke it out.  V6R1 fixes this. I
> think this was covered in the archives.  If not midrange-l try the
> security400 archives.
>
> Rob Berendt
> --
> Group Dekko Services, LLC
> Dept 01.073
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> "Jim Franz" <franz400@xxxxxxxxxxxx>
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 07/09/2008 11:50 PM
> Please respond to
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
>
>
> To
> <MIDRANGE-L@xxxxxxxxxxxx>
> cc
>
> Subject
> dns cache poisoning
>
>
>
>
>
>
> Any indication the i has issues with the dns cache poisoning
> vulnerability?
> The Cert reference mentions Bind 8 which is where V5R3 was at and guess we
> still are. IBM eserver listed as "unknown" as in no response (yet) from
> vendor.
> http://www.kb.cert.org/vuls/id/800113
>
> Bind 8 specifically in this link:
> http://www.kb.cert.org/vuls/id/927905
>
> Jim Franz
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.